topic Re: l2 vs vw in General Topics

l2 vs vw

sib2017 — Tue, 17 Jan 2017 20:01:22 GMT

Hi,

What is the differnce between l2 mode and vw mode

Thanks

Re: l2 vs vw

jvalentine — Tue, 17 Jan 2017 20:03:14 GMT

Check out the documentation here:

- https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/networking/interface-deployments#73982

Let us know if you have any specific questions after reading that.

Re: l2 vs vw

sib2017 — Tue, 17 Jan 2017 20:16:44 GMT

Hi,

Thank you for the quick reply .

the firewall now rewrites the inbound Port VLAN ID (PVID) number in a Cisco per-VLAN spanning tree (PVST+) or Rapid PVST+ bridge protocol data unit (BPDU) to the proper outbound VLAN ID number and forwards the BPDU out

What does it mean by the rewrite

Thanks

Re: l2 vs vw

reaper — Mon, 23 Jan 2017 13:52:48 GMT

in short:

a vwire acts as a "bump in the wire" so it does not 'participate' in network traffic, it simply forwards between the 2 interfaces (unless something needs to be blocked ofcourse 🙂 )

in layer2 mode, the port acts like a switch and can rewrite vlan tags, so packets incoming tagged with vlanID 200 can be egressed on vlan 300 for example. packets can also be received and sent out on any of the systems layer2 interfaces set to a specific vlan tag (so more than 1 interface can be in a specific vlan)